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Dear Sir: 

Attached is a completed Form PTO-144 9 and copies of the 
pertinent parts of the references cited thereon. Below are 
comments on these references pursuant to Rule 98: 

U.S. Patent No. 6,052,788 to Wesinger, Jr. et al. discloses a 
firewall employing "envoys", without an establishment of which no 
traffic can pass, the firewall configured as two or more sets of 
virtual hosts; one set of hosts responding to addresses on a first 
network interface of the firewall, another set of hosts responding 
to addresses on a second network interface of the firewall. 
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U.S. Patent 6,018,619 to Allard et al. discloses a method of 
tracking usage patterns of users of hypermedia systems such as the 
Web by creating a usage log on a user's client computer and 
periodically transmitting the usage log from 1 the user's computer to 
a usage tracking server, and further incorporating data so 
transmitted into an overall usage log for a given server computer. 

U.S. Patent 6,003,077 to Bawden et al. discloses a client 
computer having a standard Web browser while utilizing the services 
of a Web/SNMP proxy agent, which agent automatically locates, by 
looking up the location in the DNS , the ASN.l specification of each 
Management Information Base (MIB) module of any identified SNMP 
agent, and compiles the ASN.l MIB module specifications into HTML 
documents for viewing on the client computer. 

U.S. Patent 5,996,011 to Humes discloses a system and method 
for restricting access to data received by a computer over a 
network by filtering certain data from the data received, including 
especially material of a possibly objectionable nature. 

U.S. Patent 5,918,013 to Mighdoll discloses a method of 
providing a document to a client coupled to a server wherein the 
server functions as a caching proxy on behalf of the client for 
purpose of accessing the Web, storing in a persistent document 
database various attributes of all documents previously retrieved 
in response to a request from a client, and transcoding a document 
retrieved from a remote server in response to a request from the 
client, making use of the document database. 

U.S. Patent 5,915,087 to Hammond et al. discloses a proxy 



# 

which is part of a firewall program and controls exchanges of 
messages between two applications by interrogating, in accordance 
with defined authentication procedures, attempts by requesting 
entities to send a communication session to a server, directing a 
communications stack to monitor connection messages to any address 
on specific ports, extracting a requestor's address an a server's 
address for checking in compliance with a security policy. 

U.S. Patent 5,903,732 to Reed et al. discloses a Web platform 
implementing an access control policy and employing a process and 
file structure separated into an outside compartment, comprising a 
Web server associated with a directory tree containing only a 
minimal set of files required to interface with the internet, an 
inside compartment, comprising a plurality of CGI applications such 
that the Web server cannot communicate directly with the CGI 
application, and a trusted gateway agent for communicating between 
the Web server and the CGI applications. 

U.S. Patent 5,898,830 to Wesinger, Jr. et al. discloses a 
firewall employing "envoys", and is a parent case of U.S. Patent 
6,052,788, supra. 

U.S. Patent 5,805,820 to Bellovin et al. discloses a method 
and device for redirecting queries in order to restrict access to 
private information of a domain in a domain name system, the device 
comprising a" switching device which redirects request for 
restricted information originating within the domain to a device 
within the domain. 

U.S. Patent 5,805,803 to Birrell et al. discloses a method in 
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which client computer connected to a public network makes a request 
in a public message for an intranet resource to a "tunnel" of a 
firewall isolating the intranet from the internet, the tunnel 
sending a message to the client to redirect the request to a proxy 
server, the request to be accompanied by a token which is checked 
for validity by the proxy server. 

U.S. Patent 5,748,882 to Huang discloses techniques for fault- 
tolerant computing employing a monitor daemon implemented as one or 
more user processes and a function library, whereby a user process 
executing on ordinary hardware under an ordinary operating system 
is made fault-tolerant by registering it with the daemon, which 
registration results in defining portions of a user process ' s 
memory as critical memory, copying critical memory to persistent 
storage and restoring the critical memory from persistent storage 
in an event of a crash. 

U.S. Patent 5,696,898 to Baker et al. discloses a system for 
selectively controlling database access by restricting specific 
system users from accessing information from certain public or 
otherwise uncontrolled databases, employing a relational database 
to determine access rights. 

None of these prior patents alone or taken in combination 
discloses a customizable system for filtering web-based HTTP 
requests for outbound and inbound access to web sites wherein the 
system has an administrative module including configuration 
settings for inbound and outbound communications and a list 
maintenance function and wherein the administrative module is 



4 



located in a user computer for configuring a range of access levels 
from maximum 100% access to full suspension and has an 
administrator account, regular accounts and an anonymous guest 
account to be used by all users with no valid system user name and 
password, wherein if a user attempts to access an unfriendly site 
the user is anonymously forwarded to a friendly site or the request 
is terminated, the customizable system further including a first 
proxy server in each user computer of a local area network having 
access to the world wide web and having a customizable friendly and 
unfriendly outbound list, one of which is active, and a 
customizable friendly and unfriendly inbound list, one of which is 
active, the customizable system also including a second HTTP proxy 
server without an administrative module or friendly or unfriendly 
lists and placed between the first proxy server and the Internet, 
being located as a gateway of a Local Area Network system or at an 
Internet Service Provider domain, the second proxy being capable of 
communicating to a proxy of ' a destination or directly to a 
destination and having an Internet Protocol address known only to 
the system administrator, wherein the system automatically 
generates a logfile of all web sites visited by each user and 
wherein for single users in a home or office the second proxy is 
provided through the Internet Service Provider. 
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